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Abstract 

We present quantum algorithms for the following graph problems: 
finding a maximal bipartite matching in time 0{n^m + nlog n), finding a 
maximal non-bipartite matching in time 0(ri'(^\J rajn + log n) log n), and 
finding a maximal flow in an integer network in time 0(min(n^/®y^ • 
?7^''^, \/nUm) logn), where n is the number of vertices, m is the number 
of edges, and U < n^^'^ is an upper bound on the capacity of an edge. 

1 Introduction 

Network flows is one of the most studied problems in computer scienee. We are 
given a directed graph with two designated vertices: a source and a sink. Each 
edge has assigned a capacity. A network flow is an assignment of flows to the 
edges such that the capacity of an edge is never exceeded and the total incoming 
and outgoing flow are equal for each vertex except for the source and the sink. 
A size of the flow is the total flow going from the source. The task is to find a 
flow of maximal size. 

After the pioneering work of Ford and Fulkerson [FF56], many algorithms 
have been proposed. Let n denote the number of vertices and let m denote the 
number of edges. For networks with real capacities, the fastest algorithms run 
in time 0{n^) [Kar74, MKM78]. If the network is sparse, one can achieve a 
faster time 0(nm(logn)^) [GN79]. If all capacities are integers bounded by U, 
the maximal flow can be found in time 0(min(n^/'^m, m^^^) log(r7,^/m) log [/) 
[GR98]. For unit networks, the log- factor is not necessary and the fastest algo- 
rithm runs in time 0(min(n^/'^TO, m^^^)) [ET75]. For undirected unit networks, 
the fastest known deterministic algorithm runs in time 0(n''/^m^/'^) and the 
fastest known probabilistic algorithm runs in time ©(n^"/^) [KL98]. 
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Another well studied problem is finding a matching in a graph. We are 
given an undirected graph. A matching is a set of edges such that every vertex 
is connected to at most one other vertex. The task is to find a matching of 
maximal size. The classical algorithm based on augmenting paths runs in time 
0{n^) [Edm65, Gab76]. If the graph is bipartite, then the maximal matching 
can be found in faster time 0(n^/^) [HK73]. Finding a bipartite matching can 
be reduced to finding a maximal flow in a directed unit network, hence one can 
apply the same algorithms and achieve a running time 0(min(n^'''^m, m'^/^)) 
[ET75]. Recently, Mucha and Sankowski published a new algorithm [MS04] 
based on matrix multiplication that finds a maximal matching in both bipartite 
and non-bipartite graphs in time 0(n'^), where 2 < < 2.38 is the exponent of 
the best matrix multiplication algorithm. 

In our paper, we analyze the quantum time complexity of these problems. 
We use Grover's search [Gro96, BBHT98] to speed up searching for an edge. A 
similar approach has been successfully applied by Diirr et al. [DIIHM04] to the 
following graph problems: connectivity, strong connectivity, minimum spanning 
tree, and single source shortest paths. Our bipartite matching algorithm is 
polynomially faster than the best classical algorithm, its non-bipartite version 
is faster when the number of edges is m = 0(n^ ''^~^) for some e > 0, and the 
network flows algorithm is polynomially faster when m = r2(n^+'^) and U is 
small. 

There is an r2(n^/^) quantum adversary lower bound for the bipartite match- 
ing problem [BDF+04, Zlia(J5]. Since the bipartite matching problem is a special 
case of the other problems studied in this paper, this implies an ri(n^/^) quan- 
tum lower bound for all problems in this paper. 

2 Preliminaries 

An excellent book about quantum computing is the textbook by Nielsen and 
Chuang [NCOO]. In this paper, we only use two quantum sub-routines and 
otherwise our algorithm are completely classical. The first one is a generalization 
of Grover's search that finds k items in a search space of size i in total time 
0{Vk£) [Gro96, BBHT98]. An additional time O(V^) is needed to detect that 
there are no more solutions. The second one is quantum counting that estimates 
the number of ones in a string of length n within additive constant y/n with 
high probability in time 0{^/n) [BHMT02, Theorem 13]. 

Each of those algorithms may output an incorrect answer with a constant 
probability. Our algorithms may use a polynomial number n'^ of quantum sub- 
routines. Because of that, we have to repeat each quantum subroutine O(logn) 
times, to make sure that the probability of an incorrect answer is less than 
Then, the probability that all quantum subroutines in our algorithm 
output the correct answer is at least 1 — 1/n. This increases the running time 
of all our algorithms by a logn factor. Wc omit the log-factors in the proofs, 
but we state them in the statements of our theorems. 

A very good book about network flows is the classical book by Ahuja, Mag- 
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nanti, and Orlin [AM093]. It, however, does not contain most of the newest 
algorithms that we compare our algorithms to. We use the following concepts: 
A layered network is a network whose vertices are ordered into a number of 
layers, and whose edges only go from the i-th layer to the {i + l)-th layer. A 
residual network is a network whose capacities denote the residual capacity of 
the edges in the original network. When an edge has a capacity c and carries 
a flow /, then its residual capacity is either c — / or c + / depending on the 
direction. An augmenting path in a network is a path from the source to the sink 
whose residual capacity is bigger than 0. An augmenting path for the matching 
problem is a path that consists of alternated non-edges and edges of the current 
matching, and starts and ends in a free vertex. A blocking flow in a layered 
residual network is a maximal flow with respect to inclusion. A blocking flow 
cannot be increased by one augmenting path. A cut in a network is a subset of 
edges such that there is no path from the source to the sink if we remove these 
edges. The size of a cut is the sum of the capacities of its edges. Any flow has 
size smaller or equal to the size of any cut. 

Let us define our computational model. Let F be a fixed vertex set of size 
n > 1 and let i? C ( ^ ) be a set of edges, i? is a part of the input. Let m denote 
the number of edges. We assume that m > 1. We consider the following two 
black-box models for accessing directed graphs: 

• Adjacency model: the input is specified by an n x n Boolean matrix A, 
where = 1 iff {v,w) G E. 

• List model: the input is specified by n arrays {Ny : v G V} of length 
dy < n. Each entry of an array is cither a number of a neighbor or an 
hole, and {Nv[i] : i = 1,. . . , d^} — {hole} ~ {w : (w, w) e E}. 

The structure of the paper is as follows: In Section 3, we present a quantum 
algorithm for computing a layered network from a given network. It is used as 
a tool in almost all our algorithms. In Section 4, we present a simple quan- 
tum algorithm for bipartite matching. In Section 5, we show how to quantize 
the classical algorithm for non-bipartite matching. In Section 6, we present a 
quantum algorithm for network flows. 

3 Finding a layered subgraph 

Wc are given a connected directed black-box graph G = (V, E) and a starting 
vertex a e F, and we want to assign layers € : F N to its vertices such that 
£(a) = and t{y) = 1 -|- min^j-jj, y)^^; £(a;) otherwise. The following quantum 
algorithm computes layer numbers for all vertices: 

1. Set i{a) = and (,{x) = oo for x ^ a. 
Create a one-entry queue W = {a}. 

2. While ^ 0, 
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• take the first vertex x from W , 

• find by Grover's search aU its neighbors y with i{y) = oo. 
set i{y) := i{x) + 1, and append y into W, 

• and remove x from W . 

Theorem 1 The algorithm assigns layers in time 0{n^^^ logn) in the adja- 
cency model and in time 0{^nm logn) in the list model. 

Proof. The algoritlim is a quantum implementation of breadth-first search. 
The initiahzation costs time 0{n). Every vertex is processed at most once. In 
the adjacency model, every vertex contributes by time at most 0{s/n), because 
finding a vertex from its ancestor costs time at most 0{y/n) and discovering 
that a vertex has no descendant costs the same. 

In the list model, processing a vertex v costs time 0{\/nydv + \/di, + 1), 
where is the number of vertices inserted into W when processing v. Let 
/ < min(7i, m) be the number of found vertices. Since riy < f < n and 
^^(c?„ + 1) < Ti -)- / = 0{m), the total running time is upper-bounded by the 
Cauchy-Schwarz inequality as follows: 



and \/dy + 1 < \f] \Jm + / is upper-bounded in the same way. □ 



4 Bipartite matching 

We are given an undirected bipartite black-box graph G = (Vi, 14, and we 
want to find a maximum matching among its vertices. This can be done classi- 
cally in time 0(n^/^) [HK73] as follows: 

1. Set M to an empty matching. 

2. Let H = iy' , E') denote the following graph: 

V = U ^2 U {a, 6} 

E' = {{a,x) -.x £Vi,(x,.) (/L M] 

U {{x,y) : X e Vi.ye Vi, [x,y) e E,{x,y) ^ M} 

U {{y,x) : X &Vi,y &V2,{x,y) & E, (x, y) G M } 

U {{y,h):yeV2,{-,y)(^M] 

Find a maximal (with respect to inclusion) set S of vertex-disjoint aug- 
menting paths of minimal length. This is done as follows: First, construct 
a layered subgraph H' of H. Second, perform a depth-first search for a 
maximal set of vertex-disjoint paths from a to 6 in H' . Every such a path 
is an augmenting path in M, and they all have the same minimal length. 
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3. Augment the matching M by S. 

4. If 5 7^ 0, go back to step 2, otherwise output the matching M. 

The algorithm is correct because (1) a matching is maximal iff there is no 
augmenting path, and (2) the minimal length of an augmenting path is increased 
by at least one after every iteration. The construction of H' classically and the 
depth-first search both cost 0{n'^). The maximal number of iterations is 0(i/n) 
due to the following statement: 

Lemma 2 [HK73] // Mi and M2 are two matchings of size si and S2 with 
Si < S2, then there exist S2 ~ si vertex- disjoint augmenting paths in Mi. 

Let s be the size of the maximal matching M in G, and let s,; be the size of 
the found matching Mi after the z-th iteration. Let j be the number of the first 
iteration with Sj > s — ^Jn. The total number of iterations is at most j + \pn, 
because the algorithm finds at least one augmenting path in every iteration. On 
the other hand, by Lemma 2, there are s — Sj > \pn vertex-disjoint augmenting 
paths in My Since all augmenting paths in the j-th iteration are of length at 
least 2 + 2; it must be that j < v^i otherwise the paths would not be disjoint. 
We conclude that the total number of iterations is at most 2^pn. 

Theorem 3 Quantumly, a maximal bipartite matching can be found in time 
0{n^ logn) in the adjacency model and 0{n^m + 71 log n) in the list model. 

Proof. We present a quantum algorithm that finds all augmenting paths in one 
iteration in time 0(n'^/^), resp. 0{\/n{m + n)), times a log-factor for Grover's 
search. Since the number of iterations is 0(-\/n), the upper bound on the running 
time follows. Our algorithm works similarly to the classical one; it also computes 
the layered graph H' and then searches in it. 

The intermediate graph H is generated on-line from the input black-box 
graph G and the current matching Af , using a constant number of queries as 
follows: the sub-graph of H o\iViX V2 is the same as G except that some edges 
have been removed; here we exploit the fact that the lists of neighbors can 
contain holes. We also add two new vertices a and 6, add one list of neighbors 
of a with holes of total length n, and at most one neighbor b to every vertex 
from V2. Theorem 1 states how long it takes to compute H' from H . It remains 
to show how to find the augmenting paths in the same time. 

This is simple once we have computed the layer numbers of all vertices. We 
find a maximal set of vertex-disjoint paths from a to 5 by a depth-first search. 
A descendant of a vertex is found by Grover's search over all unmarked vertices 
with layer number by one bigger. All vertices are unmarked in the beginning. 
When we find a descendant, we mark it and continue backtracking. Either the 
vertex will become a part of an augmenting path, or it does not belong to any 
and hence it needs not be tried again. Each vertex is thus visited at most once. 

In the adjacency model, every vertex costs time 0{^Jn) to be found and 
time 0[^/n) to discover that it does not have any descendant. In the list model, 
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a vertex v costs time 0{^/rh^ + ^/(^,), where n„ is the number of unmarked 
vertices found from v. The sum over all vertices is upper-bounded like in the 
proof of Theorem 1. Note that has been increased by at most 2n. □ 

5 Non-bipartite matching 

We arc given an undirected graph G = {V, E) and wc want to find a maximal 
matching among its vertices. There is a classical algorithm [Edm65, Gab76] 
running in n iterations of time 0{n?). 

Each iteration consists of searching for an augmenting path. The algorithm 
performs a breadth-first search from some free vertex. It browses paths that 
consist of alternated non-edges and edges of the current matching. The matching 
is specified by pointers mate. Let us call a vertex v even if we have found such 
an alternated path of even length from the start to v\ otherwise we call it odd. 
Newly discovered vertices are considered to be odd. For each even vertex, we 
store two pointers link and bridge used for tracing the path back, and a pointer 
first to the last odd vertex on this path. The algorithm works as follows: 

1. Initialize a queue of even vertices W = {a} with some free vertex a. 

2. Take the first vertex v from W and delete it from W . 

3. If there exists an free vertex w connected to w, then augment the current 
matching by the path a — *■ v plus the edge {v,w), and quit. A general 
subpath p : b ^ V \s traced recursively using w's pointers as follows: 

• If bridge is nil, then link points to the previous even vertex on p. 
Output 2 edges from v to mate and link, and trace p from link to b. 

• Otherwise v was discovered via a bridge, link points to w's side of the 
bridge, and bridge to the other side. Trace p from link to v in the 
opposite direction, and then from bridge to b in the normal direction. 

4. For every odd vertex w connected to w, do the following: 

• Let w be connected to a mate w' . If w' is even, do nothing. 

• Otherwise mark w' as even, append it to W , and set its pointers as 
follows: link to u, bridge to nil, and first to w. 

5. For every even vertex w connected to w, do the following: 

• Compare the pointers first of v and w. If they are equal, do nothing. 

• Now, V and w lie on a circle of odd length, and the edge {v,w) is 
a bridge between the two subpaths. Find the nearest common odd 
ancestor poiv and w by tracing the pointers first. Collapse the circle 
as follows: 
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— Mark all odd vertices between v and p as even, append them to 
W , and set their pointers as follows: link to w, bridge to w, and 
first to p. 

— Do the same for odd vertices between w and p. 

— Finally, rewrite all links first pointing to odd vertices that have 
just become even to p. 

6. If W is empty, then there is no augmenting path from a and we quit, 
otherwise go back to step 2. 

It holds that if an augmenting path from some vertex has not been found, 
then it would not be found even later after more iterations of the algorithms. 
Hence it suffices to search for an augmenting path from each vertex once. 

Theorem 4 Quantumly, a maximal non-bipartite matching can be found in 
time 0{n^^^ \ogn) in the adjacency model and 0{n^{yjm/n + logn) logn) in 
the list model. 

Proof. The algorithm iteratively augments the current matching by single 
augmenting paths, like the classical algorithm. An augmenting path is found 
using Grover's search in faster time 0{n^/'^), resp. 0{n{\Jm/n + logn)), times 
the usual log-factor. This implies the bound on the total running time, since 
there are n vertices and each of them is used as the starting vertex a at most 
once. Let us prove the time bound for the list model. 

Let / < min(n, m) denote the number of even vertices. For every even 
vertex v., we perform the following 3 Grover's searches: First, wc look for a free 
neighbor of v in time 0{^/dk>). Second, we process all odd neighbors of v whose 
mate is still odd in total time 0(V e„(i„), where is the number of odd vertices 
that are found during processing v. Third, we process all even neighbors of v 
whose pointer first is different from ii's pointer firsts in time 0{^/bydy), where by 
is the number of bridges that are found during processing v. Clearly Sy < f 
and J2y < /, and, since J2v '^v < "z, by the Cauchy-Schwarz inequality, the 
total time spent in all Grover's searches is 0{^nm). 

Let us estimate the running time of collapsing one circle. Let pi be the 
length of the link-list of pointers first from one side of the bridge into the 
nearest common parent, let p2 be the other one, and let p = max(pi,p2). The 
nearest common parent is found in time 0{p\ogp) as follows: we maintain two 
balanced binary trees for each link-list, add vertices synchronously one-by-one, 
and search for every newly inserted vertex in the opposite tree, until we find a 
collision. Let r-„ be the number of odd vertices collapsed during processing a 
vertex v. It holds that ry = Pi + P2 = and ^yry < f. Hence the total 

time spent in collapsing circles is 0(/log/). 

Rewriting the pointers first of all even vertices inside a collapsed circle would 
be too slow. We instead maintain aside a Union-tree of all these pointers, and 
for every odd vertex converted to even, we append its subtree to the node of 
the nearest common ancestor. The total time spent in doing this is 0(/log/). 
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The augmenting path has length at most n and it is traced back in hnear 
time. We conclude that the total running time of finding an augmented time is 
0{^/nm + nlogn) = 0{n{y^m/n + log n) ) , which is 0{y/nm) for m > n(logn)^. 
The running time in the adjacency model is equal to the running time in the 
list model with m = n , that is 0{n^/^). □ 

6 Integer network flows 

We are given a directed network with real capacities, and we want to find a 
maximal flow from the source to the sink. There are classical algorithms running 
in time 0{n^) [Kar74, MKM78]. They iteratively augment the current flow by 
adding blocking flows in layered residual networks [Din70] of increasing depth. 
Since the depth is increased by at least one after each iteration, there are at 
most n iterations. Each of them can be processed in time 0{n^). For sparse 
real networks, the fastest known algorithm runs in time 0(nm(logn)^) [GN79]. 

Let us restrict the setting to integer capacities bounded by U. There is a sim- 
ple capacity scaling algorithm running 0{nm\ogU) [EK72, Din70]. The fastest 
known algorithm runs in time 0(min(n^/'^m, m'^''^) log(n^/m) log /7) [GR98]. 
For unit networks, i.e. for J7 = 1, a simple combination of the capacity scaling 
algorithm and the blocking-flow algorithm runs in time 0(min(n^/'^m, m'^/^)) 
[ET75]. For undirected unit networks, there is an algorithm running in time 
Oir?^"^ -Jm) [GR99], and the fastest known algorithm runs in worst-case time 
0(n'^/6m2/3) and expected time ©(n^o/^) [KL98]. 

Lemma 5 [ET7r)] Let us have an integer network with capacities bounded by 
U, whose layered residual network has depth k. Then the size of the residual 
flow is at most min((2n/fc)^, m/k) ■ U . 

Proof. 

(1) There exist layers Ve and Vf+i that both have less than 2n/k vertices. 
This is because if for every i = 0,1, . . . ,k/2, at least one of the layers 
V2i, V2i+i had size at least 2n/k, then the total number of vertices would 
exceed n. Since Ve and Vf+i form a cut, the residual flow has size at most 
\Vi\-\Vi+i\-U <{2n/k)^U. 

(2) For every i = 0, 1, . . . , fc — 1, the layers Vi and V^+i form a cut. These 
cuts are disjoint and they together have at most m edges. Hence at least 
one of them has at most m/k edges, and the residual flow has thus size at 
most 0{mU /fc). 

□ 

Theorem 6 Let U < ti^/"*. Quantumly, a maximal network flow with integer 
capacities at most U can he found in time 0{n^^^^ ■ U^^^ logn) in the adjacency 
model and in time 0(min n) in the list model. 
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Proof. The algorithm iteratively augments the current flow by blocking flows 
in layered residual networks [Din70], until the depth of the network exceeds 
k = min(n^/'^f/^/^, ^/mU). Then it switches to searching single augmenting 
paths [EK72], while there are some. The idea of switching the two algorithms 
comes from [ET75]. Our algorithm uses classical memory of size 0(71^) to store 
the current flow and its direction for every edge of the network, and a 1-bit 
status of each vertex. A blocking flow is found as follows: 

1. Compute a layered subgraph H' of the residual network H. The capacity 
of each edge in H is equal to the original capacity plus or minus the current 
flow depending on the direction. Edges with zero capacities are omitted. 

2. Mark all vertices as enabled. 

3. Find by a depth-flrst search a path p in H' from the source to the sink 
that only goes through enabled vertices. If there is no such a path, quit. 
During back-tracking, disable all vertices from which there is no path to 
the sink. 

4. Compute the minimal capacity /i of an edge on p. 
Augment the flow by p. along p. 

5. Go back to step 3. 

The layered subgraph H' is computed from H using Theorem 1, and the 
capacities of H arc computed on-line in constant time. When the flow is aug- 
mented by p along the path p, the saturated edges will have been automatically 
deleted. This is because the algorithm only stores layer numbers for the vertices, 
and the edges of H' are searched on-line by Grover's search. 

Let us compute how much time the algorithm spends in a vertex v during 
searching the augmenting paths. Let denote the number of augmenting paths 
going through 1; and let e^^i denote the number of outgoing edges from v at the 
moment when there are still i remaining augmenting paths. The capacity of 
every edge is at most U, hence e„.i > \i/U]. The time spent in Grover's 
searches leading to an augmenting path in v is thus at most 




= 0{\JUavdv). 



Let Cy denote the number of enabled vertices found from v that do not lie on 
an augmenting path and are thus disabled. The time spent in Grover's searches 
for these vertices is at most 0{^Cydv). Furthermore, it takes additional time 
0{\/dy + 1) to discover that there is no augmenting path from v, and in this 
case V is disabled and never visited again. 

Let j denote the depth of the network and let Aj be the size of its blocking 
flow. The total number of augmenting paths going through vertices in any 
given layer is at most Aj. We conclude that — ^1^° know that 
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X]« '^v < n. Since dy < m, by the Cauchy-Schwarz inequality, the total time 
spent by finding one blocking flow is 



^^{\/Uaydy + y/ Cydy + dy + l) < VU Gy dy + 2^/^1771 

V \ V V V 

= 0{\/ jmAjU + y/nm). 

Our algorithm performs at most k = mm{n^/^U^^^ , VmU) iterations of 
finding the blocking flow in total time at most y/mll ■ X]j=i + ky/nm. 

Let us assume that the algorithm has not finished, and estimate the size of 
the residual flow and thus upper-bound the number of augmenting paths that 
need to be found. The algorithm has constructed in this iteration a layered 
network of depth bigger than k. By Lemma 5, the residual flow has size 
0(min((n/fc)^, m/A:) • U) = 0{k), hence the algorithm terminates in 0{k) more 
iterations. From this point on, the algorithm only looks for one augmenting path 
in each layered network, hence its complexity drops to 0{\/j'm) ~ 0{y/nm) per 
iteration, omitting the factor yJAyU . The total nmning time is thus at most 




jAj + k\/ nrnj + 0{k\/nm). 



Let us prove that \/ = 0{k?^'^). We split the sequence into logfc inter- 
vals 5*^ = {2\ 2* + 1, . . . , 2'+i - 1} of length 2\ By Lemma 5, the residual flow 
after l = k/2'' iterations is at most 0{imxi{{n/kf ■ 2^*, m/k ■ 2*) • U) < 0{2'^'k) = 
0{{k/ tf't) = 0{k'^ /t). Since the total size of all blocking flows cannot ex- 
ceed the residual flow, Y^j=(^ = 0{k'^/£). By applying the Cauchy-Schwarz 
inequality independently on each block, we get 



lOET k 



2» + i_l 



\ 1=2' 



k logfe2' + ^-l 

EVJA- = E E v^<E^"^ 

j=l i^O j^2' ^-0 

log k log k 

< x/2^2'VW2^= V2-fc^2''/2 = Cl(fc-''/2). 

i=0 k=Q 

The total running time is thus 0{ky/rn{y/kU + \/n)). Now, kU < n, because 
U < n^l^ and kU = min(n2/3[/4/3, ^ . [/3/2) < n^l^n^l'^ = n. The running 
time is therefore 0{ky/nm) = 0(mm{'n7^^ ^ym■U^^^ , y/nUm)), times a log-factor 
for Grover's search. The time for the adjacency model follows from setting 
m = ri^ and it is 0(rii3/^ • L/^/'''logn). □ 

It is not hard to compute an upper bound on the running time of the 
network flows algorithm for U > n^^^ by the same techniques. One obtains 



0(min(n 



7/6 



m. 



\/nm) ■ Ulogn) for arbitrary U by setting k = min(n^/'^, y^). 



It would be interesting to apply techniques of [GR98] to improve the multiplica- 
tive constant in Theorem 6 from poly([/) to logCZ. If m = n{n^^^) for some 
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£ > and U is small, then our algorithm is polynomially faster than the best 
classical algorithm. For constant U and m = 0{n), it is slower by at most a 
log-factor. The speedup is biggest for dense networks with m = O(n^). 

Theorem 7 Any bounded-error quantum algorithm for network flows with in- 
teger capacities bounded by U ^ n has quantum query complexity 17(n^). 

Proof. Consider the following layered graph with m = O(n^) edges. The 
vertices are ordered into 4 layers: the first layer contains the source, the second 
and third layer contain p = ^ — 1 vertices each, and the last layer contains 
the sink. The source and the sink are both connected to all vertices in the 
neighboring layer by p edges of full capacity n. The vertices in the second and 

2 2 

third layer are connected by either ^ or ^ + 1 edges of capacity 1 chosen at 
random. The edges between these two layers form a minimal cut. Now, deciding 

2 2 

whether the maximal flow is ^ or ^ + 1 allows us to compute the majority on 
p^ bits. There is an = n(n^) lower bound for majority, hence the same 

lower bound also holds for the computation of the maximal flow. □ 
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